|
276701
|
7.2 |
HIGH
|
freebsd
|
freebsd
|
Kerberos 5 su (k5su) in FreeBSD 4.5 and earlier does not verify that a user is a member of the wheel group before granting superuser privileges, which could allow unauthorized users to execute comman…
|
NVD-CWE-Other
|
CVE-2002-0755
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276702
|
7.5 |
HIGH
|
usermin
webmin
|
usermin
webmin
|
Cross-site scripting vulnerability in the authentication page for (1) Webmin 0.96 and (2) Usermin 0.90 allows remote attackers to insert script into an error page and possibly steal cookies.
|
NVD-CWE-Other
|
CVE-2002-0756
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276703
|
7.5 |
HIGH
|
usermin
webmin
|
usermin
webmin
|
(1) Webmin 0.96 and (2) Usermin 0.90 with password timeouts enabled allow local and possibly remote attackers to bypass authentication and gain privileges via certain control characters in the authen…
|
NVD-CWE-Other
|
CVE-2002-0757
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276704
|
5.0 |
MEDIUM
|
bzip
|
bzip2
|
bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly other operating systems, does not use the O_EXCL flag to create files during decompression and does not warn the u…
|
NVD-CWE-Other
|
CVE-2002-0759
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276705
|
1.2 |
LOW
|
bzip
|
bzip2
|
Race condition in bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly other operating systems, decompresses files with world-readable permissions before setting the p…
|
NVD-CWE-Other
|
CVE-2002-0760
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276706
|
2.1 |
LOW
|
bzip
|
bzip2
|
bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly systems, uses the permissions of symbolic links instead of the actual files when creating an archive, which could …
|
NVD-CWE-Other
|
CVE-2002-0761
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276707
|
7.5 |
HIGH
|
hp
|
virtualvault
|
Vulnerability in administration server for HP VirtualVault 4.5 on HP-UX 11.04 allows remote web servers or privileged external processes to bypass access restrictions and establish connections to the…
|
NVD-CWE-Other
|
CVE-2002-0763
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276708
|
7.5 |
HIGH
|
phorum
|
phorum
|
Phorum 3.3.2a allows remote attackers to execute arbitrary commands via an HTTP request to (1) plugin.php, (2) admin.php, or (3) del.php that modifies the PHORUM[settings_dir] variable to point to a …
|
NVD-CWE-Other
|
CVE-2002-0764
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276709
|
7.2 |
HIGH
|
richard_gooch
|
simpleinit
|
simpleinit on Linux systems does not close a read/write FIFO file descriptor before creating a child process, which allows the child process to cause simpleinit to execute arbitrary programs with roo…
|
NVD-CWE-Other
|
CVE-2002-0767
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276710
|
7.5 |
HIGH
|
luke_mewburn
suse
|
lukemftp
suse_linux
|
Buffer overflow in lukemftp FTP client in SuSE 6.4 through 8.0, and possibly other operating systems, allows a malicious FTP server to execute arbitrary code via a long PASV command.
|
NVD-CWE-Other
|
CVE-2002-0768
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276711
|
6.4 |
MEDIUM
|
cisco
|
ata-186
|
The web-based configuration interface for the Cisco ATA 186 Analog Telephone Adaptor allows remote attackers to bypass authentication via an HTTP POST request with a single byte, which allows the att…
|
NVD-CWE-Other
|
CVE-2002-0769
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276712
|
5.0 |
MEDIUM
|
id_software
|
quake_2i_server
|
Quake 2 (Q2) server 3.20 and 3.21 allows remote attackers to obtain sensitive server cvar variables, obtain directory listings, and execute Q2 server admin commands via a client that does not expand …
|
NVD-CWE-Other
|
CVE-2002-0770
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276713
|
6.4 |
MEDIUM
|
hosting_controller
|
hosting_controller
|
Directory traversal vulnerability in dsnmanager.asp for Hosting Controller allows remote attackers to read arbitrary files and directories via a .. (dot dot) in the RootName parameter.
|
NVD-CWE-Other
|
CVE-2002-0772
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276714
|
10.0 |
HIGH
|
hosting_controller
|
hosting_controller
|
imp_rootdir.asp for Hosting Controller allows remote attackers to copy or delete arbitrary files and directories via a direct request to imp_rootdir.asp and modifying parameters such as (1) ftp, (2) …
|
NVD-CWE-Other
|
CVE-2002-0773
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276715
|
10.0 |
HIGH
|
hosting_controller
|
hosting_controller
|
Hosting Controller creates a default user AdvWebadmin with a default password, which could allow remote attackers to gain privileges if the password is not changed.
|
NVD-CWE-Other
|
CVE-2002-0774
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276716
|
5.0 |
MEDIUM
|
hosting_controller
|
hosting_controller
|
browse.asp in Hosting Controller allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter.
|
NVD-CWE-Other
|
CVE-2002-0775
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276717
|
7.5 |
HIGH
|
hosting_controller
|
hosting_controller
|
getuserdesc.asp in Hosting Controller 2002 allows remote attackers to change the passwords of arbitrary users and gain privileges by modifying the username parameter, as addressed by the "UpdateUser"…
|
NVD-CWE-Other
|
CVE-2002-0776
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276718
|
10.0 |
HIGH
|
ipswitch
|
imail
|
Buffer overflow in the LDAP component of Ipswitch IMail 7.1 and earlier allows remote attackers to execute arbitrary code via a long "bind DN" parameter.
|
NVD-CWE-Other
|
CVE-2002-0777
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276719
|
5.0 |
MEDIUM
|
novell
|
bordermanager
|
FTP proxy server for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service (network connectivity loss) via a connection to port 21 with a large amount of random data.
|
NVD-CWE-Other
|
CVE-2002-0779
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276720
|
5.0 |
MEDIUM
|
novell
|
bordermanager
|
IP/IPX gateway for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service via a connection to port 8225 with a large amount of random data, which causes ipipxgw.nlm to AB…
|
NVD-CWE-Other
|
CVE-2002-0780
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276721
|
5.0 |
MEDIUM
|
novell
|
bordermanager
|
RTSP proxy for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service via a GET request to port 9090 followed by a series of carriage returns, which causes proxy.nlm to A…
|
NVD-CWE-Other
|
CVE-2002-0781
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276722
|
5.0 |
MEDIUM
|
novell
|
bordermanager
|
Novell BorderManager 3.5 with PAT (Port-Address Translate) enabled allows remote attackers to cause a denial of service by filling the connection table with a large number of connection requests to h…
|
NVD-CWE-Other
|
CVE-2002-0782
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276723
|
7.5 |
HIGH
|
opera_software
|
opera_web_browser
|
Opera 6.01, 6.0, and 5.12 allows remote attackers to execute arbitrary JavaScript in the security context of other sites by setting the location of a frame or iframe to a Javascript: URL.
|
NVD-CWE-Other
|
CVE-2002-0783
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276724
|
5.0 |
MEDIUM
|
lysias
|
lidik_webserver
|
Directory traversal vulnerability in Lysias Lidik web server 0.7b allows remote attackers to list directories via an HTTP request with a ... (modified dot dot).
|
NVD-CWE-Other
|
CVE-2002-0784
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276725
|
5.0 |
MEDIUM
|
aol
|
instant_messenger
|
AOL Instant Messenger (AIM) allows remote attackers to cause a denial of service (crash) via an "AddBuddy" link with the ScreenName parameter set to a large number of comma-separated values, possibly…
|
NVD-CWE-Other
|
CVE-2002-0785
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276726
|
5.0 |
MEDIUM
|
critical_path
|
injoin_directory_server
|
iCon administrative web server for Critical Path inJoin Directory Server 4.0 allows authenticated inJoin administrators to read arbitrary files by specifying the target file in the LOG parameter.
|
NVD-CWE-Other
|
CVE-2002-0786
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276727
|
7.5 |
HIGH
|
critical_path
|
injoin_directory_server
|
Cross-site scripting vulnerabilities in iCon administrative web server for Critical Path inJoin Directory Server 4.0 allow remote attackers to execute script as the administrator via administrator UR…
|
NVD-CWE-Other
|
CVE-2002-0787
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276728
|
7.5 |
HIGH
|
mnogosearch
|
mnogosearch
|
Buffer overflow in search.cgi in mnoGoSearch 3.1.19 and earlier allows remote attackers to execute arbitrary code via a long query (q) parameter.
|
NVD-CWE-Other
|
CVE-2002-0789
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276729
|
5.0 |
MEDIUM
|
novell
|
netware
|
Novell Netware FTP server NWFTPD before 5.02r allows remote attackers to cause a denial of service (CPU consumption) via a connection to the server followed by a carriage return, and possibly other i…
|
NVD-CWE-Other
|
CVE-2002-0791
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276730
|
5.0 |
MEDIUM
|
cisco
|
webns
content_services_switch_11000
|
The web management interface for Cisco Content Service Switch (CSS) 11000 switches allows remote attackers to cause a denial of service (soft reset) via (1) an HTTPS POST request, or (2) malformed XM…
|
NVD-CWE-Other
|
CVE-2002-0792
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276731
|
5.0 |
MEDIUM
|
freebsd
|
freebsd
|
The accept_filter mechanism in FreeBSD 4 through 4.5 does not properly remove entries from the incomplete listen queue when adding a syncache, which allows remote attackers to cause a denial of servi…
|
NVD-CWE-Other
|
CVE-2002-0794
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276732
|
2.1 |
LOW
|
freebsd
|
freebsd
|
The rc system startup script for FreeBSD 4 through 4.5 allows local users to delete arbitrary files via a symlink attack on X Windows lock files.
|
NVD-CWE-Other
|
CVE-2002-0795
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276733
|
7.5 |
HIGH
|
youngzsoft
|
cmailserver
|
Buffer overflow in YoungZSoft CMailServer 3.30 allows remote attackers to execute arbitrary code via a long USER argument.
|
NVD-CWE-Other
|
CVE-2002-0799
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276734
|
5.0 |
MEDIUM
|
working_resources_inc.
|
badblue
|
BadBlue 1.7.0 allows remote attackers to list the contents of directories via a URL with an encoded '%' character at the end.
|
NVD-CWE-Other
|
CVE-2002-0800
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276735
|
10.0 |
HIGH
|
macromedia
|
jrun
|
Buffer overflow in the ISAPI DLL filter for Macromedia JRun 3.1 allows remote attackers to execute arbitrary code via a direct request to the filter with a long HTTP host header field in a URL for a …
|
NVD-CWE-Other
|
CVE-2002-0801
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276736
|
7.5 |
HIGH
|
mozilla
|
bugzilla
|
Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when configured to perform reverse DNS lookups, allows remote attackers to bypass IP restrictions by connecting from a system with a spoofed reve…
|
NVD-CWE-Other
|
CVE-2002-0804
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276737
|
4.6 |
MEDIUM
|
mozilla
|
bugzilla
|
Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, (1) creates new directories with world-writable permissions, and (2) creates the params file with world-writable permissions, which allows local …
|
NVD-CWE-Other
|
CVE-2002-0805
|
2008-09-6 05:28 |
2002-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276738
|
7.5 |
HIGH
|
yahoo
|
messenger
|
Yahoo! Messenger 5,0,0,1064 and earlier allows remote attackers to execute arbitrary script as other users via the addview parameter of a ymsgr URI.
|
NVD-CWE-Other
|
CVE-2002-0032
|
2008-09-6 05:27 |
2002-07-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276739
|
7.5 |
HIGH
|
ibm
|
lotus_domino_server
|
Lotus Domino Servers 5.x, 4.6x, and 4.5x allows attackers to bypass the intended Reader and Author access list for a document's object via a Notes API call (NSFDbReadObject) that directly accesses th…
|
NVD-CWE-Other
|
CVE-2002-0037
|
2008-09-6 05:27 |
2002-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276740
|
5.0 |
MEDIUM
|
sgi
|
irix
|
rpcbind in SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, allows remote attackers to cause a denial of service (crash) via malformed RPC packets with invalid lengths.
|
NVD-CWE-Other
|
CVE-2002-0039
|
2008-09-6 05:27 |
2002-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276741
|
2.1 |
LOW
|
sgi
|
irix
|
Vulnerability in SGI IRIX 6.5.11 through 6.5.15f allows local users to cause privileged applications to dump core via the HOSTALIASES environment variable, which might allow the users to gain privile…
|
NVD-CWE-Other
|
CVE-2002-0040
|
2008-09-6 05:27 |
2002-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276742
|
5.0 |
MEDIUM
|
sgi
|
irix
|
Unknown vulnerability in Mail for SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, when running with the -R option, allows local and remote attackers to cause a core dump.
|
NVD-CWE-Other
|
CVE-2002-0041
|
2008-09-6 05:27 |
2002-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276743
|
2.1 |
LOW
|
sgi
|
irix
|
Vulnerability in the XFS file system for SGI IRIX before 6.5.12 allows local users to cause a denial of service (hang) by creating a file that is not properly processed by XFS.
|
NVD-CWE-Other
|
CVE-2002-0042
|
2008-09-6 05:27 |
2002-06-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276744
|
7.5 |
HIGH
|
nswc
|
cider_shadow
|
Multiple CGI scripts in CIDER SHADOW 1.5 and 1.6 allows remote attackers to execute arbitrary commands via certain form fields.
|
NVD-CWE-Other
|
CVE-2002-0091
|
2008-09-6 05:27 |
2002-03-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276745
|
7.5 |
HIGH
|
fraunhofer_fit
|
bscw
|
config_converters.py in BSCW (Basic Support for Cooperative Work) 3.x and versions before 4.06 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name during f…
|
NVD-CWE-Other
|
CVE-2002-0094
|
2008-09-6 05:27 |
2002-03-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276746
|
7.5 |
HIGH
|
fraunhofer_fit
|
bscw
|
The default configuration of BSCW (Basic Support for Cooperative Work) 3.x and possibly version 4 enables user self registration, which could allow remote attackers to upload files and possibly join …
|
NVD-CWE-Other
|
CVE-2002-0095
|
2008-09-6 05:27 |
2002-03-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276747
|
7.2 |
HIGH
|
geeklog
|
geeklog
|
The installation of Geeklog 1.3 creates an extra group_assignments record which is not properly deleted, which causes the first newly created user to be added to the GroupAdmin and UserAdmin groups, …
|
NVD-CWE-Other
|
CVE-2002-0096
|
2008-09-6 05:27 |
2002-03-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276748
|
7.5 |
HIGH
|
yabb
|
yabb
|
Cross-site scripting vulnerability in Yet Another Bulletin Board (YaBB) 1 Gold SP 1 and earlier allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded …
|
NVD-CWE-Other
|
CVE-2002-0117
|
2008-09-6 05:27 |
2002-03-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276749
|
7.5 |
HIGH
|
sambar
|
sambar_server
|
cgitest.exe in Sambar Server 5.1 before Beta 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long argument.
|
NVD-CWE-Other
|
CVE-2002-0128
|
2008-09-6 05:27 |
2002-03-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276750
|
4.6 |
MEDIUM
|
eazel
|
nautilus
|
Nautilus 1.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the .nautilus-metafile.xml metadata file.
|
NVD-CWE-Other
|
CVE-2002-0157
|
2008-09-6 05:27 |
2002-05-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
